Loading...
Publication
O Ciberespaço e a vulnerabilidade das infraestruturas críticas: Contributos para um Modelo Nacional de Análise e Gestão do Risco Social
| Name: | Description: | Size: | Format: | |
|---|---|---|---|---|
| 10.99 MB | Adobe PDF |
Authors
Advisor(s)
Abstract(s)
As infraestruturas críticas suportam todos os aspectos do nosso quotidiano. São os alicerces da nossa civilização e a vanguarda do nosso futuro. Elas permitem a existência de cada elemento da nossa sociedade e não há maior prioridade que garantir a sua segurança, preservando a sua
integridade e garantindo a continuidade do seu funcionamento. Os Estados estão hoje tão dependentes das suas infraestruturas críticas que a sua protecção se tornou um assunto de segurança nacional, e as suas vulnerabilidades uma matéria discutida ao mais alto nível. As
infraestruturas críticas são actualmente uma mescla de sistemas, uma verdadeira rede de redes, com retalhos de tecnologia moderna eobsoleta, combinados numapaisagem fragmentada pela partilha entre a propriedade pública e privada. A rápida banalização da Internet e a integração das telecomunicações edos computadores, ligaram as infraestruturas críticas entresi e criaram uma intrincada e vulnerável rede de interdependências que está exposta a um grande número de ameaças, internas e externas. Assim, apesar de isoladas fisicamente, as infraestruturas críticas estão sujeitas aos potenciais efeitos em cascata resultantes da falha em apenas uma delas. Os sistemas de controlo industrial são extremamente vulneráveis a ataques vindos do ciberespaço e este facto foi já demostrado por diversas vezes numa série de incidentes que causaram grande impacto tanto em várias infraestruturas críticas como na sociedade que delas depende.Estavulnerabilidade é a génesedeum crescente riscosocialque ameaça asegurança dos próprios Estados. A identificação e gestão dos riscos associados a estas infraestruturas é hoje uma área de estudo de grande importância para assegurar um futuro mais seguro, minimizando o impacto das múltiplas ameaças que pendem sobre o conjunto de instalações industriais e serviços que estão na base do modo de vida das sociedades modernas. Neste sentido, as melhores práticas a nível internacional apontam para a adopção de uma abordagem holística dos riscos e para um aumento da resiliência a todos os possíveis cenários de catástrofe natural ou ataque intencional. Além disso, generalizou-se a adopção de procedimentos apoiados
em normas internacionais que sendo de aplicação genérica podem facilmente ser adaptadas às especificidades nacionais de cada Estado. O caminho a seguir por Portugal deve ser este;
adoptar as melhores práticas anível internacional, ajustando-as à realidade nacional.
Abstract Critical infrastructures support every aspect of our daily lives. They are the foundations of our civilization and the frontline of our future by allowing the existence of each element of our society. There is no higher priority than ensuring their safety, preserving their integrity and ensuring the continuity of their operations. States are now so dependent on their critical infrastructures that protecting them has become a national security issue, and their vulnerabilities a matter discussed at the highest level. Critical infrastructures are currently a mix of systems, a true network of networks, with scraps of modern and obsolete technology, combined in a fragmented landscape, due to a split between public and private property. The trivialization of the Internet along with the rapid integration of telecommunications and computers, brought critical infrastructures together and created an intricate and vulnerable mesh of interdependencies which is exposed to a largenumber of threats, both internal and external. Thus, although physically isolated, critical infrastructures are subject to potential cascading effects resulting from the failure of just one of them. Industrial control systems are extremely vulnerable to attacks from cyberspace and this fact has been repeatedly demonstrated in a series of incidents that caused major impact on several critical infrastructures, and on the communities depending on them. This vulnerability is at the genesis of a growing social risk that threatens the States’ security itself. Identifying and managing risks associated with these infrastructures is nowadays an area of study of great significance to ensure a safer future, minimizing the impact of multiple threats that hang over the set of industrial facilities sustaining the basis of our way of life. In this sense, the best international practices point to the adoption of an all hazards approach to risk and increased resilience to allpossiblescenarios ofnaturaldisaster or deliberate attack. Furthermore, the widespread adoption of procedures supported by international standards, being generic in its application, can be easily adapted to each State national specificities. This should be the way forward for Portugal; adopt the best international practices, adjusting them to thenational reality.
Abstract Critical infrastructures support every aspect of our daily lives. They are the foundations of our civilization and the frontline of our future by allowing the existence of each element of our society. There is no higher priority than ensuring their safety, preserving their integrity and ensuring the continuity of their operations. States are now so dependent on their critical infrastructures that protecting them has become a national security issue, and their vulnerabilities a matter discussed at the highest level. Critical infrastructures are currently a mix of systems, a true network of networks, with scraps of modern and obsolete technology, combined in a fragmented landscape, due to a split between public and private property. The trivialization of the Internet along with the rapid integration of telecommunications and computers, brought critical infrastructures together and created an intricate and vulnerable mesh of interdependencies which is exposed to a largenumber of threats, both internal and external. Thus, although physically isolated, critical infrastructures are subject to potential cascading effects resulting from the failure of just one of them. Industrial control systems are extremely vulnerable to attacks from cyberspace and this fact has been repeatedly demonstrated in a series of incidents that caused major impact on several critical infrastructures, and on the communities depending on them. This vulnerability is at the genesis of a growing social risk that threatens the States’ security itself. Identifying and managing risks associated with these infrastructures is nowadays an area of study of great significance to ensure a safer future, minimizing the impact of multiple threats that hang over the set of industrial facilities sustaining the basis of our way of life. In this sense, the best international practices point to the adoption of an all hazards approach to risk and increased resilience to allpossiblescenarios ofnaturaldisaster or deliberate attack. Furthermore, the widespread adoption of procedures supported by international standards, being generic in its application, can be easily adapted to each State national specificities. This should be the way forward for Portugal; adopt the best international practices, adjusting them to thenational reality.
Description
Keywords
Infraestruturas críticas Vulnerabilidades Ciberespaço Ameaças Impacto Segurança Nacional Risco Social
Citation
Publisher
Academia Militar. Direção de Ensino